ash/test/support/policy_complex/resources/user/user.ex

defmodule Ash.Test.Support.PolicyComplex.User do
  @moduledoc false
  use Ash.Resource,
    data_layer: Ash.DataLayer.Ets,
    authorizers: [
      Ash.Policy.Authorizer
    ]

  policies do
    # For testing we need to be able to read/create/update users
    policy action_type(:read) do
      forbid_if selecting(:private_email)
      authorize_if always()
    end

    policy action_type(:create) do
      authorize_if always()
    end

    policy action_type(:update) do
      authorize_if always()
    end
  end

  ets do
    private?(true)
  end

  attributes do
    uuid_primary_key(:id)

    attribute :name, :string do
      allow_nil? false
    end

    attribute :private_email, :string
  end

  actions do
    defaults [:read, :update, :destroy]

    create :create do
      primary? true
      argument :email, :string

      change set_attribute(:private_email, arg(:email))
    end

    update :add_friend do
      accept []

      argument :friend_id, :uuid do
        allow_nil? false
      end

      change Ash.Test.Support.PolicyComplex.User.Changes.AddFriend
    end
  end

  preparations do
    prepare build(deselect: :private_email)
  end

  code_interface do
    define_for Ash.Test.Support.PolicyComplex.Api
    define :create, args: [:name]
    define :add_friend, args: [:friend_id]
  end

  relationships do
    has_many(:posts, Ash.Test.Support.PolicyComplex.Post, destination_attribute: :author_id)

    has_many :friends, Ash.Test.Support.PolicyComplex.User do
      manual Ash.Test.Support.PolicyComplex.User.Relationships.Friends
    end
  end
end